RE: Unable to create trust with NT

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Rebecca Chen [MSFT] (v-rebc_at_online.microsoft.com)
Date: 09/03/04 

Date: Fri, 03 Sep 2004 08:35:01 GMT

Hello,

I am a little unclear about "Windows 2003 domain admin group has been made
as part of NT administrator group", what do you mean by it? Do you mean you
have already established the trust from NT to Win2k3 and add the Win2k3
admin group to NT admin group?

When you establish trust to NT from Win2k3, you are prompt to input the
password to establish the trust. What kind of credentials you have input?

Technically speaking, we establish the trust in this way:

- On Window NT, trusting Win2k3
- On Win2k3, establish trusting to NT
- On NT, establish trusted to Win2k3.
- On Win2k3, establish trusted to NT.

Please refer to the following article to establish the trust:

NT 4.0 and Windows 2003 Active Directory Interoperability
http://www.microsoft.com/seminar/shared/asp/view.asp?url=/seminar/en/2003062
3tnt1_79/manifest.xml

Trust Creation Fails When You Create a Trust with a Windows NT 4.0 Domain
During Upgrade to Windows Server 2003
http://support.microsoft.com/default.aspx?scid=kb;en-us;817012

More information:

Migrating Windows NT to Windows Server 2003 using the Active Directory
Migration Tool

http://techupdate.zdnet.com/techupdate/stories/main/Migrating_Windows_NT_to_
Windows_Server_2003.html

If the issue persists, please take a screen shot of the error message and
refer to the following KB to gather the MPSReport on Win2k3 and send it to
me for research:

Overview of the Microsoft Configuration Capture Utility (MPS_REPORTS)
<http://support.microsoft.com/default.aspx?scid=kb;en-us;818742>

Related information:
Trust Transitivity
http://www.microsoft.com/resources/documentation/WindowsServ/2003/all/techre
f/en-us/Default.asp?url=/resources/documentation/windowsserv/2003/all/techre
f/en-us/w2k3tr_sec_trust_over.asp

If you have any questions, please feel free to let me know.

Have a nice day!

Best regards,

Rebecca Chen

MCSE2000 MCDBA CCNA

Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

Relevant Pages

  • RE: Win2003 server cant browse NT Domain
    ... What is the relationship between your win2k3 machine and NT? ... DC and you are building trust to NT or win2k3 is a member server? ... How to Write an LMHOSTS File for Domain Validation and Other Name ... How To Establish Trusts with a Windows NT-Based Domain in Windows Server ...
    (microsoft.public.windows.server.migration)
  • RE: Trust between Win2K3 native mode to Win2k Mixed Mode
    ... You can establish a Trust between Windows 2003 Native mode and either ... Windows 2000 or Windows NT domains. ... > Forest and Domain level to Native mode in Win2K3 while I did a domain rename. ...
    (microsoft.public.windows.server.general)
  • RE: Trust between Win2K3 native mode to Win2k Mixed Mode
    ... another Windows 2000 domain in another forest running in mixed mode. ... I was concerned when I try to establish a trust from Win2K3, ... running Win2K which I am not sure whether it is in Native mode or Mixed mode. ...
    (microsoft.public.windows.server.general)
  • RE: How to create trust relationship between Windows 2003 Server (domain controler) and Windows NT 4
    ... relationship between windows NT and Windows 2003 by following the ... Establish Trusts with a Windows NT-Based Domain in Windows Server ... How to Create a Trust Relationship ... Create a Two-Way Trust Relationship ...
    (microsoft.public.win2000.security)
  • 2003 to NT Domain Trust not working.
    ... the Windows 2000 domain. ... PDC tries to create a trust. ... The domain contains an NT Server 4.0 PDC, ... dom2K domain controllers. ...
    (microsoft.public.win2000.networking)